Benjamin Wright is an attorney who teaches e-discovery, data security and cyber investigations law at the SANS Institute. In commenting on the recent matter of Lucile Salter Packard Hospital being fined for not notifying patients within 5 days of confirming that PHI were on a stolen computer, Wright states: Yet I will say that it…
Category: Health Data
UK: IT manager at Hull PCT pleads guilty in snooping charges
As a follow-up to a case reported on this blog previously: Dale Trever, 22, a data quality manager at Hull Primary Care Trust, has pleaded guilty to snooping through patients’ medical records over 400 times. Most of them were the records of family members, friends, and colleagues. Anh Nguyen reports in Computerworld (UK): At Hull…
Update/Pointer: East and North Hertfordshire NHS Trust hospital identified
Lister Hospital was the hospital involved in the recent East and North Hertfordshire NHS Trust incident where a junior doctor left a flash drive with unencrypted patient information on a train. More here.
Ca: Psych report of veterans critic inserted in minister's briefing: documents
Murray Brewster reports: Confidential medical and financial information belonging to an outspoken critic of Veterans Affairs, including part of a psychiatrist’s report, found its way into the briefing notes of a cabinet minister. Highly personal information about Sean Bruyea was contained in a 13-page briefing note prepared by bureaucrats in 2006 for then minister Greg…
Pointer: Over 23,000 patients notified in three breaches reported to HHS
In addition to a LabCorp breach where we do not have a lot of information other than 507 patients were notified of theft of paper records with their PHI, I also just posted three other newly revealed breaches over on PHIprivacy.net that resulted in over 23,000 patients being notified. You can read about those…
VA employee hoarded stacks of patient-related info at home
Sandra Yin reports on recent VA disclosures of breaches. I had covered the August report here, but her coverage makes some interesting points; Paper is much more problematic than electronic data, according to Veterans Affairs CIO Roger Baker. [which is why all state and federal mandatory disclosure laws should include paper records — Dissent!] Here’s…